tcpdump mailing list archives

Re: How does packet capture interact with


From: Robert Burgess <burgess () systems cs cornell edu>
Date: Thu, 24 Sep 2009 10:04:28 -0400

you somehow have to make sure that the kernel doesn't deal with packets
you want to take care of. If you don't, it will reset TCP connections
and reply with ICMP port unreachable messages to UDP datagrams etc.

Yes, that is a problem; I was handling it by having the OS firewall
(whatever it is) drop those packets I intend to handle.  In my application
I can get away with leaving that firewall setup to an administrator so
my code can be OS-independent.

Robert.
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.


Current thread: